THE SHORT VERSION
We collect only what we need to deliver your purchase and communicate with you. We do not sell your data. We do not share it with third parties except where necessary to operate (e.g. payment processing). You can ask us to delete your data at any time. The full details are below.
---
1. WHO WE ARE
This Privacy Policy applies to LearnArabicCalligraphy.com, a website operated by Al-Waqi'ah. We are the data controller responsible for your personal information.
When this Policy refers to "we," "us," or "our," it means Al-Waqi'ah. When it refers to "you" or "your," it means any person who visits this website, purchases a product, or submits their information through any form on this site.
If you have any questions about how we handle your data, please contact us at [email protected]
---
2. WHAT DATA WE COLLECT
We collect only the information necessary to provide our products and services. This includes:
Name — When you complete a purchase or submit an opt-in form
Email address — When you purchase, opt in to our list, or contact support
Billing address — When you complete a purchase (collected by our payment processor)
Payment information — At checkout — processed and stored by our payment provider, never by us directly
IP address & browser data — Automatically, when you visit our website (via analytics tools)
Purchase history — When you buy a product — stored in our CRM for support and delivery purposes
Support correspondence — When you email or contact us with a query or refund request
We do not collect sensitive personal data such as racial or ethnic origin, religious beliefs, health data, or financial account information beyond what is processed at checkout by our payment provider.
---
3. HOW WE USE YOUR DATA
We use your personal data for the following purposes:
• To fulfil your purchase — delivering your digital product(s) to the email address you provided at checkout
• To provide customer support — responding to queries, processing refund requests, and resolving any issues with your order
• To send marketing communications — where you have opted in, we may send you emails about related products, updates, or offers. You can unsubscribe at any time
• To improve our products and website — using anonymised analytics data to understand how visitors use our site
• To comply with legal obligations — retaining transaction records as required by applicable law
• To run advertising campaigns — we may use your email address to create custom or lookalike audiences on platforms such as Meta (Facebook/Instagram), where you have not opted out of such use
We will never use your data for any purpose that is incompatible with the purposes listed above without first obtaining your consent.
---
4. LEGAL BASIS FOR PROCESSING
Where the UK GDPR or equivalent data protection legislation applies, we process your personal data on the following legal bases:
• Contract performance — processing your order and delivering your purchased products
• Legitimate interests — improving our products, preventing fraud, and running retargeting advertising campaigns (where your interests do not override ours)
• Consent — sending marketing emails and newsletters where you have explicitly opted in
• Legal obligation — retaining financial and transaction records as required by law
Where we rely on consent as our legal basis, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.
---
5. THIRD PARTIES & PROCESSORS
We work with a small number of trusted third-party services to operate our business. These parties process your data on our behalf and are bound by data processing agreements. We do not sell your data to any third party.
Our current data processors include:
GoHighLevel (GHL) — CRM, funnel hosting, email delivery, and customer management
Stripe / payment processor — Secure payment processing at checkout
Meta (Facebook / Instagram) — Paid advertising — we may share hashed email data for custom audiences
Google Analytics (if enabled) — Anonymous website traffic and behaviour analytics
Each of these providers has their own privacy policy and is responsible for their own data handling. We recommend reviewing their policies if you have specific concerns.
Meta Advertising: If we run paid ads, we may use the Meta Pixel on our website and may share hashed (anonymised) customer email lists to create advertising audiences. You can opt out of Meta's use of your data for advertising purposes via your Facebook account settings under "Ad Preferences."
---
6. COOKIES & TRACKING
Our website uses cookies and similar tracking technologies. Cookies are small text files placed on your device that help us understand how you use our site and enable certain features to work correctly.
We use the following types of cookies:
• Essential cookies — required for the website and checkout to function. These cannot be disabled
• Analytics cookies — help us understand visitor behaviour in aggregate so we can improve the site. These are anonymised
• Marketing/retargeting cookies — placed by platforms such as Meta to enable us to show relevant advertising to people who have visited our site
You can control cookies through your browser settings. Disabling certain cookies may affect the functionality of this website. Where required by law, we will request your consent before placing non-essential cookies.
---
7. HOW LONG WE KEEP DATA
We retain your personal data only for as long as necessary for the purposes set out in this Policy, or as required by law.
• Purchase records — retained for 7 years to comply with financial record-keeping requirements
• Email marketing lists — retained until you unsubscribe or request deletion
• Support correspondence — retained for 2 years after your last interaction with us
• Analytics data — typically retained in anonymised form for up to 26 months
When data is no longer needed, we securely delete or anonymise it.
---
8. YOUR RIGHTS
Depending on where you are located, you may have the following rights regarding your personal data. We will respond to all valid requests within 30 days.
Right of Access — Request a copy of the personal data we hold about you
Right to Rectification — Ask us to correct any inaccurate or incomplete data
Right to Erasure — Request that we delete your personal data ("right to be forgotten")
Right to Restrict — Ask us to limit how we use your data while a dispute is resolved
Right to Portability — Receive your data in a structured, machine-readable format
Right to Object — Object to processing based on legitimate interests, including direct marketing
Withdraw Consent — Withdraw consent for marketing emails at any time via unsubscribe link
Lodge a Complaint — Complain to the ICO (UK) or your local data protection authority
To exercise any of these rights, contact us at [email protected]. We may need to verify your identity before processing your request.
UK residents: You have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk if you believe we have not handled your data lawfully. We would always appreciate the opportunity to address your concerns directly before you contact the ICO.
---
9. CHILDREN'S PRIVACY
Our products and website are directed at adults. We do not knowingly collect personal data from children under the age of 13. If you believe a child has provided us with personal information without appropriate parental consent, please contact us immediately and we will take steps to delete that data.
If you are purchasing our products for educational use with your children, the account and purchase should be made in the parent or guardian's name and email address.
---
10. INTERNATIONAL TRANSFERS
Some of the third-party services we use (including GoHighLevel and Meta) are based in the United States. Where your data is transferred outside the UK or European Economic Area, we ensure that appropriate safeguards are in place — such as Standard Contractual Clauses approved by the relevant data protection authority.
By using our website and purchasing our products, you acknowledge that your data may be processed in countries outside your own, including the United States, in accordance with the safeguards described above.
---
11. CHANGES TO THIS POLICY
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other operational reasons. The date at the top of this page indicates when the Policy was last revised.
We encourage you to review this Policy periodically. Where changes are material, we will make reasonable efforts to notify you — for example, by email or by posting a notice on our website. Your continued use of our website after any changes constitutes your acceptance of the updated Policy.
---
12. CONTACT & COMPLAINTS
If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or have a concern about how we have handled your personal information, please contact us.
Email: [email protected]
We will respond to all data requests within 30 days.